[Pkg-freeradius-maintainers] Bug#919236: Bug#919236: Inappropriately broad default CA for EAP configuration

[Sam Hartman]

control: tags -1 help

>>>>> "Michael" == Michael Stapelberg <stapelberg at debian.org> writes:

    Michael>    Can you send a patch please? It€™s been like
    Michael> that since before I touched the package.

My suspicion is that it's removing parts of a patch.  In fact, it looks
like most of what's needed is to remove snakeoil-certs.diff from the
patch series.
Yes, doing that requires the user run make in /tec/freeradius/3.0/certs,
but they really probably do want a different certificate hierarchy for
EAP.

I really don't think I'm going to be able to provide more on this prior
to the buster release.  I'm struggling trying to get through my own list
of things to fix in my packages.